Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges...

CVE-2020-21386

CVE-2020-21386 is a CSRF vulnerability in Maccms 10 affecting the component admin.php/admin/type/info.html. The issue arises from its admin flow failing to verify that requests originate from trusted users, enabling an attacker to gain administrator privileges. The connected documents consistentl...

CVE-2020-21386: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges...

PT-2021-10620

Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A Cross-Site Request Forgery CSRF issue in the component "admin.php/admin/type/info.html" allows attackers to gain administrator privileges. Recommendations: For Maccms version 10, consider disabling access to t...

CVE-2019-19222: Improper Neutralization of Input During Web Page Generation

A Stored XSS issue in the D-Link DSL-2680 web administration interface Firmware EU1.03 allows an authenticated attacker to inject arbitrary JavaScript code into the info.html administration page by sending a crafted Forms/wirelessautonetwork1 POST request...

PT-2018-11298

Name of the Vulnerable Software and Affected Versions CirCarLife Scada versions prior to 4.3 Description The issue allows remote attackers to obtain sensitive information. This can be achieved by making a direct request for specific URI endpoints, such as "html/log" or "services/system/info.html"...

CVE-2018-12634: Exposure of Sensitive Information to an Unauthorized Actor

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI...

PT-2018-11024

Name of the Vulnerable Software and Affected Versions Maccms version 10 Description The issue allows for CSRF, enabling attackers to add user accounts via the admin.php/admin/admin/info.html endpoint. Recommendations For Maccms version 10, as a temporary workaround, consider restricting access to...

CVE-2018-12114: Cross-Site Request Forgery (CSRF)

Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts...

PT-2017-14977

Name of the Vulnerable Software and Affected Versions BrightSign Digital Signage 4k242 device versions 6.2.63 and below Description The issue concerns a problem where an attacker can execute malicious scripts. The estimated number of potentially affected devices worldwide is not specified. Detail...

CVE-2017-11589

CVE-2017-11589 affects Cisco DDR2200/DDR2201v1 ADSL2+ Residential Gateways. The issue is a lack of access control for multiple management pages (e.g., info.html, wancfg.cmd, rtroutecfg.cmd, etc.), allowing potential unauthorized access to sensitive configuration views. Public descriptions in NVD/...

CVE-2017-11589: Improper Limitation of a Pathname to a Restricted Directory

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is no access control for info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuview.cmd, memoryview.cmd, statswan.cmd,...